APPENDIX 1 



#!/usr/bin/php -q 
<? 

require(7home/scopeuser/production/include_prefs.php"); 
$GLOBALS["ini_config"] = SinLconfig; 

$path = 7var/vvww''.$GLOBALSr'inLconfig"]r'webpath"]; 
chdir($path); 

require("7libs/phpmailer/class.phpmailer.php"); 
require("7elements/metrics_generation.inc"); 
require("7elements/graphing/line_plot.inc"); 
require("./elements/timezone.inc"); 



//Connect to database 

niysqL<x)nnect($inLconfigrhostnanie"l.$inLconfigr-db_usen.$inLco ^password"]) or die("Unable 
to connect to the database"); 

mysqLselect_db($ini_configr'database"]) or die("Unable to select database"); 



class Message 
{ 

var $elements; 
var $recipient; 
var $notification_type; 
var $timezone_offset; 

function init($elements, $recipient, $notification_type) { 
$this->elements = $elements; 

$this->time2one_offset = get_timezone_offeet($this->elementsr'userJd"]. $this- 
>elements["user_serverjd"]); 

$this->recipient = Srecipient; 
$this->notification_type = $notification_type; 

} 

function build() 
{ 

$thls->elementsrgraphlng_file"] = "linej)lor; 
if ($this->notification_type == 'emair) { 
$this->build_email{); 

} 

elseif ($this->notification_type == 'page') { 
$this->build_page(); 

} 



} 

function graphjgen() { 

$metrics_dict = Array(); 
$metrics_dictr'hour_from"l = 0; 
$metrics_dictr'hourJo*T = 24; 
$metrics_dict["divison = $this->elements['divisor']; 
Smetrics^dictriegendT = 1; 
$metrics_dictrxgridT = 1; 



$metrics_dictrVgrid"] = 1; 
. $metrics_dict["itemsJojgraph"] = array($this->elementsrmonitorJd"]); 

$metrics_dictr*mdn = 1; 
$metrics_dictrNA^atermark"] = 1; 
$metrics_dictrview_type"] = "last_24"; 
$metrics_dict["timezone_offser] = $this->timezone_offset * -1; 
$timestamps = timestampsJast24($metrics_dict['timezone_offset*]. $this- 
>elements['eventJogJimestamp'l): 

$metrics_dict['timestamp_from'] = $timestamps[0]; 
$metrics_dict('timestamp_toT = $timestamps[1]; 

$metrics_dict["generated_timestamps"] = generate_timestamps($metrics_dict); 
$metrics_dict('plot_file'] = $this->elementsI"ploLtype"].".php"; 

# Process Results Of The Last 24 Hours for the Metric 
$results_data = process_results($metrics_dict, $this->elements); 
$this->elementsradjusted_unif] = $results_data[1l; 

# Generate Graph 

$gcid = linej3lot($metrics_dict, $this->elements, $results_data); 
$eventJog = generate_eventJog($metrics_dict. $this->elements); 

return Array($gcid. $eventJog); 

} 

function build_page{) 
{ 

// build the 120 char text body 
$page_char_max = 120; 
if ($this->elements["metric_type"] == "tunnel") { 
$dividable = 2; 

$this->page_body = $this->elements["verdicr].":".$this- 
>elements^unneLaliasl."-^$this->elements^'tunneLent^y_alias"l;-^$this->elen^^entsI"^ 
if (sizeof($this->page_body) > $page_char_max) { 

$excess = sizeof($this->page_body - $page_char_max); 

Sperjtem = $excess / $dividable; 

$this->page_body = $thls->elementsrVerdicf i-r-.substrCSthis- 
>elementsr'tunneLalias"]. 0, (-1 * $perJtem))."-".substr($this->e!ementsnunneLentry_alias"], 0. (-1 * 
$perjtem)).*'-'.$this->elements["metric_name"l; 
} 

} 

elseif ($this->elementsr'metric_type"l == "interface") { 
$dividable - 2; 

$this->page_body = $this->elementsrVerdict"].";",$this- 
>elementsrdevice_alias"]."-".$this->elenrientsrinterface_alias"];'-".$this->elenientsrm 
if (sizeof($this->page_body) > $page_char_max) { 

Sexcess = sizeof($this->page_body - $page_char_max); 

$per_item = $excess / $dividable; 

$this->page_body = $this->elements[Verdict"].":".substr($this- 
>elementsrdevice_alias1. 0. (-1 * $per_item))."-".substr($this->elementsr'interface_alias"]. 0. (-1 * 
$perjtem))."-".$this->elements["metric_name"]; 
} 

} 

elseif ($this->elementsrmetric_typeT == "vip") { 
$dividable = 2; 

$th!s->page_body = $this->elementsrverdicri.":".$this- 
>elements^device_a!ias^."-".$this->elementst^ip_a!ias^."-".$this->elenr^e^ts^ 



if (si2eof($this->page_body) > $page_char_max) { 

$exceed = sizeof($this->page_body - $page_char_max); 
$per_item = $exceess / $dividable; 

$this->page_body = $this->elementsrverdicr].":".substr($this- 
>elements["device_alias"l. 0. (-1 * $per_item))."-".substr($this->elements("interface_alias"], 0. (-1 * 
$perjtem))."-*.$this->elementsrmetric_name"]; 

} 

} 

elseif ($this->elennentsrmetric_type"l == "device") { 
$dividable = 1; 

$this->page_body = $this->elementsrVerdict"l.":".$this- 
>elementsrdevice_alias'i;'-^$this->elements["metric_name"]; 

if {sizeof($this->page_body) > $page_char_max) { 

Sexcess = sizeof($this->page_body - $page_char_max); 

Sperjtem = Sexcess / $dividable; 

$this->page_body = $this->elements[Verdict"].":",substr($this- 
>eleinentsrdevice_alias"]. 0. (-1 * $per_item))."-".$this->elementsrmetric_name"]; 
} 

} 

} 

function build_email() 
{ 

// generate plot 

list($this->gcid, $this->eventJog) = $this->graph_gen(); 

// url for image source 

$url = $GLOBALSrini_config"ir'url"]; 



// build the text and html email subjects and bodys 
if ($this->elementsrmetric„type"] == "tunnel") { 
$details = An-ay ( 

ArrayfTunnel Alias". $this->elements["tunneLalias"]), 

An^yfTunnel Entry Alias", $this->elementsrtunneLentry_alias"]). 

An^y("Metric". $this->elements["metric_name"]). 

ArrayrSystem Message", $this->elementsrnnsg"]) 

): 

} 

elseif ($this->elementsrmetric_type"] == "interface") { 
$details = Array ( 

ArrayrOevice Alias". $this->elementsrdevice_alias"l), 
Aaayflnterface Alias", $this->elementsr'interface_alias^), 
ArrayfMetric", $this->elements["metric_name"]). 
ArrayfSystem Message", $this->elementsrmsgn) 

); 

} 

elseif ($this->elementsrmetric_typeT == "Vip") { 
$details = Asray( 

ArrayfDevice Alias", $this->elementsrdevice_alias^). 
ArrayfVIP Alias". $this->elementsrvip_alias"]), 
An^yCMetric", $this->elementsrmetric_name"]), 
ArrayfSystem Message". $this->elementsr'msg"]) 

): 

elseif ($this->elementsrmetric_type"l == "device") { 
Sdetails = Array ( 



ArrayfOevice Alias", $this->elementsr*device_alias"]), 
Array("Metric", $this->elementsrmetric_name"l). 
ArrayC'System Message", $this->elementsrmsg"]) 

): 

} 

$formatted_details = 

foreach ($details as $detail) { 

$formatted_details = $formatted_details.$detailIO].": ".$detailI1 ]."\n"; 

} 

$this->text_body = sprintf( 
"%s Alert Detected 



%s". 

ucwords{$this->elements["verdict"l), 
$formatted_details 

); 

if ($this->elementsrVerdict"] == "OK") { 
$verdict_clean = "Recx}very"; 

} 

else{ 

$verdict_clean = "Error"; 

} 

$formatted_details = •<table align="center bgcolor='*#F8F8F8">'; 
foreach ($details as $detail) { 

$formatted_details = $formatted_details;<tr><td 
align="right">\$detail[0].":</td><td><b>".$detail[1]."</b></td></tr>"; 

} 

$formatted_details = $formatted_detalls."</table>"; 
$this->htmLbody = sprintfC 

<html> 

<head> 

<link rel="stylesheet" type="text/css" href="%sips_ccv2.css7> 
<title>IP Sciences - Notifications - Alert</title> 

</head> 

<body bgcolor="#fffffr marginheight=40 marginwidth=0 topmargin=40 leftmargin=0> 
<div 

align="center" 

style="border.1px solid #000; margin-height Opx; margin-left:5px; margin- 
rightSpx; margin-top:Opx; width:100%%; height100%%"> 
<table 

style=%wdth:100%%;height100%%" 
summary="main layouf 
bgcoIor='*ffffff' 
border="0" 

cellpadding="0" cellspaclng="0"> 
<tr style="height:24"> 

<td width="182" valign="top" height="24" 
background="%sgraphics/hdrjorange_ban.gir> 

<img alt=V src="%sgraphics/dot_clear.gir width="182" 

height="24" border="07> 

</td> 

<td width="1" vaIign="top" height="24"> 

<img alt=-J' src="%sgraphics/dot_clear.g!f' width="2" 



height="24" border="07> 

</td> 

<td valign="top" width="100%%" bgcolor="#3c60aa" align="center" 

height="24"> 

<img alt="_" src="%sgraphics/stmt_jgeni.gif' border="0"/ 

height="24"> 

</td> 

</tr> 
<tr> 

<td valign="top" bgcolor="#ffffff *> 

<img alt="ips logo" src="%sgraphics/ipslogo_cut.jpg" 

border="0"/> 

</td> 

<td width="r valign="top"> 

<img alt="_" src="%sgraphics/dot_clear.gif' width="2" 

border="07> 

</td> 

<td valign="top" width="100%%"> 

<table width="100%%" bgcolor="#888895" border="0" 

cellpadding="0" cellspacing- '0"> 

<tr> 

<td bgcolor="#888895" height="17" colspan="2"></td> 

</tr> 
<tr> 

<td bgco!or="#888895"> 

<img 

src="%sgraphics/webhead_notifications.gif' width="305" height="60" alt=""> 

<Ad> 

<td width="202" height="60" bgcolor="#888895"> 
<Ad> 

<ftr> 
<tr> 

<td colspan="2"> 
<nd> 

<Ar> 
<Aable> 

</td> 

</tr> 
<\x> 

<td width="100%%" height="100%%" align="center valign="top" 

bgcolor="#fffffi" colspan="3"> 

<br/> 
%s<br/> 

<img alt="IPS Plor src="dd:ipsplof /> 
<br/> 

', $url, $url, $ur1, $urt, $url, $ur1, $url, $ur1, $formatted_detaiis): 
if($this->elementsrplot_type'] != 'barjplof ) { 

$thls->html_body .= '-ctabte bgcolor="#000000" border="0" 
cellpadding="1"cellspacing="0"><tP'<td> 

<table border="0" cellpadding="1" cellspacing="0" 

bgco!or="#ffffff> 

<tP'<td colspan="3" 

align="center"><h4>Legend</h4></td></tr>'; 

if($this->elements["metric_typeT == 'device') { 

$metric_alias = $this->elementsrdevice_alias'].' - '.$this- 

>elementsrmetric_name']; 



} 

elseif($this->elementsr'metric_type"] == ^interface') { 

$metric_alias = $this->elementsrdevice_alias*]/ - '.Sthis- 
>elementst'interface_alias'l/ - •.$this->elements['metric_name']; 

} 

elseif($this->elementsrmetric_type"] == Vip') { 

$metric_alias = $this->elements['device_alias'].' - \$this- 
>e!ementsrvip_alias']/ - \$this->elementsrmetric_name*]; 

} 

elseif($this->elementsrmetric_type"] == 'tunnel') { 

$metric_alias = $this->elementsrtunneLalias*].$this- 
>elements['tunneLentry_alias']/ - '.$this->elementsrmetric_name']; 

} 

$metric_alias = ' ('.$this->elements['adjusted_unif];)'; 
$this->html_body = '<tr>'; 

$this->htnfil_body = '<td><img src- ",$url/graphics/legend_0.gir 

alt=""></td>'; 

$this->html_body = '<td style="font lOpx Anal. Sans- 
Serif;">\$metric_alias/</td></tr>'; 

//output mdr 

$this->htmLbody .= '<tr>*; 
$this->htmLbody = •<td><img src="\$uri;graphics/legend_1-gif alt=""></td>'; 

$this->htmLbody .= '^d style- 'font: 10px Arial,Sans-Serif;">Median Data Range - 

85%</td>': 

$this->htmLbody = '</tr>'; 

$this->html_body = '<ir>\ 
$this->htmLbody = •<td><lmg src="'.$uri;graphics/legend_2.gif ' alt=""></td>'; 

$this->htmLbody = •<td style="font: 10px Arial.Sans-Serif;">Median Data Range - 

95%</td>'; 

$this->htmLbody = '</tr>'; 

$this->htmLbody = •<tr>'; 
$this->htmLbody = '<td><img src="'.$uri;graphics/legend_3.gif ' alt=""></td>'; 

$this->htmLbody = '^d style="font: 10px Arial,Sans-Serif;">Median Data Range - 

99%</td>'; 

$this->html_body = '^ti^'; 

$this->htmLbody = '</table></tP></td></table><br>'; 

$this->htmLbody = sprintff 
</td></tr>'); 

} else { 

$this->html_body .= sprintfC<table bgcolor="#000000" border="0" 
cellpadding="0" cellspacing="0"><tP^<td align="center><img src="%sgraphics/availjegend.png" 
alt=""></td></tP'</table>'. $url); 

} 

$this->html_body .= *<tP'<td width="100%" colspan="3">'.$this- 
>eventJog."<br></td></tP-"; 

$this->html_body .= sprintfC 
<trstyle="height10"> 

<td align="center" vwdth="100%%" valign="top" bgcolor="#3c60aa" 

colspan="3"> 

<img src="%sgraphics/copyright_label.gir alt="'Copyright 

image"> 

</td> 

</tr> 



</table> 

</div> 

</body> 
</html>\ $url); 
} 



function send{) { 

// send an individual notification 
Small = new PHPMailer(); 
if($this->notification_type == 'emair) { 
if ($this->gcid) { 
$mail- 

>AddEmbeddedlmage($GLOBALS[•ini_conflg•]['graphcachei7ipsJ^$this->gcid;^png^"ipsplof^ $this- 
>gcid;'.png"); 

} 

$mail->Subject = sprintf( 

"%s- Alert [ID:%d%sr, 

ucwords($this->elements["verdicn). 

$this->elementsr'monitorJd"], 

$this->elements["account_name"] 

); 

$mail->FromName = "IP Sciences"; 
$mail->From = "support@ipsciences,com"; 
$mail->Body = $this->htmLbody; 
$mail->AltBody = $this->text_body; 

} 

else{ 

$mail->FromName = "IPS"; 
$mai!->From = "support@ipsciences.com"; 
$mail->Subject = ""; 
$mail->Body = $this->page_body; 
$mail->AltBody = *"'; 

} 

$mail->AddAddress{$this->recipient); 
$mail->Host = "localhosr; 
$mail->Mailer = "smtp"; 

if(!$mail->Send()) { 

echo "Message was not senf *; 

echo "Mailer Error ".$mail->Errorlnfo; 

} 

retum 1; 

} 

} 



class Notification { 

var $elements = ArrayO; 

function init($compiete_notification) { 

// initialize the elements of the notification 
$this->elements = $complete_notification; 

} 

function grab_attributes() { 



// grab notification attributes 

$status = $this->elementsrescalation"]; 

Stertiaryjevel = ( 

10 + $this->elementsrprimary_escalation_dela/'] 
+ $this->elementsrsecondary_escalation_delay"] 
+ $this->elements["tertiary_escalation_delay"] 

): 

$secondaryJevel = ( 

5 + $this->elements["primary_escalation_delay"] 
+ $this->elementsr'secondary_escalation_delay"] 

): 

Sprimaryjevel = $this->elements["primary_escalation_delay"]; 

$this->notification_email = 0; 
$this->notification_page = 0; 
if ($status > Stertiaryjevel) { 

$this->escalation Jevel = "tertiary"; 

if ($this->elementsnertiary_email"]) { 

$this->emaiLcontact = $this->elements["tertiary_emair']; 
$this->notification_ennail = 1; 

} 

if ($this->elements["tertiaryj3agen) { 

$this->pager_contact = $this->elements["tertiaryjDager'']; 
$this->notification_page = 1 ; 

} 

} 

($this->notification_email == 0) 
&& ($this->notification_page == 0) 
&& ($status > $secondaryJevel) 

){ 

$this->escalation Jevel = "secondary"; 

if {$this->elementsr'secondary_emair]) { 

$this->emaiLcontact = $this->elementsr'secondary_emain; 
$this->notification_email = 1 ; 

} 

if {$this->elementsrsecondaryj3ager''l) { 

$this->pager_contact = $this->elementsr*secondary_pager'*]; 
$this->notificationj)age = 1; 

} 

} 

if( 

($this->notification_email == 0) 
&& {$this->notificationj3age == 0) 
&& (Sstatus > $primaryjevel)) { 



$this->escalationJevel = "primar/*; 

if ($this->elementsrprimary_emair]) { 
$this->notification_email = 1; 

$this->emaiLcontact = $this->elementsrprimary_emair]; 

} 

if ($this->elements["primary_pager"]) { 
$this->notification _page = 1 ; 

$this->pager_contact = $this->elements["primary_pager"]; 

} 

} 

else{ 

$this->escalation Jevel = "none"; 

} 

) 

function mark_sent{) { 

// mark the notification sent 
$sqLmark_sent_notification = sprintf( 

"UPDATE errorjog SET timestamp = timestamp. notified = 1 WHERE 
errorJogJcl=%d AND en'orJog_serverJd=%d", 

$this->elementsreiTorJogJd'], $this->elements[*errorJog_serverJd']); 
mysqLquery($sqLmark_sent_notification); 

} 

function send() { 

// send notifications 

$error = 0; 

if ($this->notification_email) { 

SemaiLnotification = new Message(); 
$enr^aiLnotification->init( 

$this->elenrients, $this->emaiLcontact, 

•email'); 
$emaiLnotification->build{); 
if($emaiLnotification->send()) { 

$eiTOr = 0; 

} 

} 

if ($this->notificationjpage) { 

$emaiLnotification = new Message(); 
$emaiLnotification->init( 

$this->elements. $this->pager_contact. 

'page'); 

$emaiLnotification->build(); 
if($emaiLnotification->send()) $en-or = 0; 

} 

if ($en-or == 0) return 1; 
else return 0; 

} 

} 



function send_notifications($notification_objects) { 

// Send the notifications (one at a time in serial) 



foreach ($notification_objects as $notification_object) { 
$notification_object->grab_attributes{); 
if($notification_object->send()) { 

$notification_object->mark sent(); 

} 

} 

} 

function run() { 

// Run the notifications engine 
$notification_objects = Array(); 

$sql_get_notifications = "SELECT DISTINCT en-orjog/. DATE_FORMAT(errorJog.timestamp, 
•%Y%m%d%H%i%s') AS eventjog Jimestamp. 
aile.*. rule_monitor*, monitor,*, user.*, account*, metric* 
FROM errorjog, rule. rule_monitor, monitor, user, account, metric 
WHERE error Jog.notified = 0 
AND rule.ruleJd=errorJog.ruleJd 
AND rule.rule_sen/erJd=errorJog.rule_serverJd 
AND rule_monitor.ruleJd=rule.ruleJd 
AND rule_monitor,rule_serverJd=rule.rule_serverJd 
AND rule_monitor.monitorjd=errorjog.monitorjd 
AND rule_monitor.monitor_serverJd=errorJog.monitor_serverJd 
AND monitor.monitorjd = rule_monitor.monitorJd 
AND monitor.monitor_serverJd = rule_monitor,monitor_serverJd 
AND metric. metricjd = monitor.metricjd 
AND metric. metric_serverjd = monitor. metric_serverjd 
AND user.userjd = rule.userjd 
AND user.user_serverjd = rule.user_serverjd 
AND accountaccountjd = user.accountjd 

AND account.account_serverJd = user.account_serverJd ORDER BY error Jog.timestamp ASC"; 



$queried_notifications = mysqLquery($sql_get_notifications); 

while (Snotification = mysqLfetch_assoc($queried^notifications)) { 
$complete_notification = $notification; 
if($complete_notificationr'metric_type*l == "device") { 
$sqLcomplete = sprintf( 

"SELECT monitor_device.*. device.* FROM monitor_device, device 
WHERE monitor_device.monitorJd=%d 
AND monitor_device.monitor_serverJd=%d 
AND device,deviceJd=monitor_device.deviceJd 
AND device.device_serverJd=monitor_device.device_serverJd". 

$complete_notificationr'monitorJd'l, 
$complete_notificationrmonitor server Jd'l); 
} 

elseif($complete_notificationrmetric_typeT == "interface") { 
$sqljcomplete = sprintf( 

"SELECT monitor Jnterface.*. interface. interface_alias. 
interface.interface_number, device.* 
FROM monitorjnterface, interface, device 
WHERE interface.interfaceJd=monitorJnterface.interfaceJd 
AND interface.interface_serverJd=monitorJnterface.interface_serverJd 
AND device.devicejd=interface.devicejd 
AND device.device_ServerJd=interface.device_serverJd 
AND. monltorjnterface,monitorjd=%d 



AND monitorJnterface.monitor_serverJd=%d'\ $complete_notificationrmonitorJd"], 
$cx)mplete_notificationrmonitor_serverJd*]): 
} 

elseif($complete_notificationrmetric_type"] == "vip") { 
$sqLcomplete = sprintf( 

"SELECT monitor_vip.*. vip.vip_alias. device.* 

FROM monitor_vip. vip, device 

WHERE vip.vipjd = monitor__vip.vipJd 

AND vip.vip_serverjd = monitor_vip.vip_serverJd 

AND device.devicejd=vip.devicejd 

ANDdevice,device_serverJd=vip.device_serverJd 

AND monitor_vip. monitor Jd =%d 

AND monitor_vip.monitor_serverJd=%d". $complete_notification["monitorJd"], 
$complete_notificationrmonitor_serverJd"]): 
} 

elseif($complete_notification["metric_type"] == "tunnel") { 
$sqLcomplete = sprintf{ 

"SELECT monitoMunnei.*, tunnel.tunnel_alias. 

tunneLentry,tunneLentry_aIias 

FROM monitor Junnel, tunnel. tunneLentry. tunnel_side 

WHERE monitor_tunneLmonitorJd=%d 

AND monitor_tunnel,monitor_serverJd=%d 

AND tunnel_side.tunnel__sideJd=monitor_tunnel.tunneLsideJd 

AND tunneLside.tunnel_side_serverJd=monitorJunnel.tunnel_side_serverJd 

AND tunneLentry.tunnel_entryJd=tunnel_side.tunnel_entryJd 

AND tunnel_entry.tunnel_entry_serverJd=tunneLside.tunneLentry_serverJd 

AND tunnel.tunnelJd=tunneLside.tunnelJd 

AND tunnel.tunneLserverJd=tunneLside.tunneLserverJd", $complete_notificationrmonitorJd"]. 
$complete_notificationI"monitor_serverJd"]); 
} 

$queried_notification_data = mysql_query($sql_complete); 
$more_data = mysqLfetch_assoc{$queried_not!fication_data); 
foreach(array_keys($more_data) as $key) { 

$complete_notification[$key] = $more_data[$keyl; 

} 

$notification_object = new Notification(); 
$notification_object->init($complete_notification); 
$notification_objectsG = $notification_object; 



send_notifications($notification_objects); 

} 

ain(); 
?> 



